The Predators of Facebook: How Facebook’s Built-In Features Enable Identity Theft and Criminal Sock Puppet Networks

HACKED: THE SAGA #62 Date: December 4, 2025 Duration: 1:24:00 min
Watch Now
The Digital Defense Toolkit Crisis Response | Carla Sallee Alvarez | Hacked the Saga

Download the Digital Defense Toolkit Crisis Response

Are your accounts being accessed? Has your content been stolen? Are odd things happening and no one is listening?

I understand … because it happened to me.

Enter your email to download a free copy of The Digital Defense Toolkit Crisis Response and learn the first steps to take to regain control.

🔥 Key Revelations

  • Cybersecurity & Digital Safety
  • Social Media Fraud & Scams
  • Law Enforcement Accountability
  • Digital Marketing Ethics
  • Christian Ministry Security
  • Refugee/Immigrant Safety
  • Platform Accountability & Regulation
  • Identity Theft & Cybercrime
  • First Amendment & Free Speech Issues
  • Corporate Corruption & Whistleblowing

Episode Summary

In this explosive episode, Carla documents how Facebook/Meta has created built-in features that enable and profit from criminal activity, including identity theft, account takeovers, and harassment campaigns. She provides screenshots proving Meta knows which accounts are fake yet excludes them from their own advertising campaigns while allowing them to operate freely.

The episode covers the post-Cambridge Analytica advertising landscape, how businesses are being scammed by fake engagement services, and Carla’s ongoing battle with conspirators from Houston Christian University who continue hacking her accounts despite police reports.

She also reveals the dangerous exposure of Afghan Christian refugees’ personal documents through these criminal networks.

📍 Key Moments

00:33:00- "Meta itself knew that this account was a fake account and that any campaigns that they're running, they're not going to be running to this account."
00:37:00- "Meta officially had a 17 strike policy for accounts that had reportedly engaged in the trafficking of humans for sex."
01:18:03- "The exposure of these Afghans directly, directly lies at the feet of the Salem Police Department."
00:04:46- "I have had the Woodburn police tell me that hacking wasn't a crime. I went to the Portland FBI office in person and they told me that it didn't rise to the level of investigation."
00:21:21- "The sock puppets are the pixel now. They literally replace your friend, your actual connections, with accounts that they control so they can deliver ads to you."
00:55:45- "I followed the account, interacted with a couple of their posts. And then when I went back and looked a few days later, that particular account I was not following anymore, but there was an account that kind of looked sort of similar."
01:22:32- "Keep in mind that social media is not reality. The level of corruption just on a platform basis...there's a strong likelihood that [the account of that] person could be a fake profile."
00:43:32- "You have sock puppets that are faking engagement and you have some sort of model that's going in and just basically changing these mentions so it doesn't show up as a negative mention."
00:59:20- "If you fire that agency, your accounts are burned. They probably will move all your real followers off onto one of their accounts that they manage and stick sock puppets on yours."

Detailed Show Notes

Introduction: What is “Hacked the Saga”?

Timestamp: [00:00:17 – 00:07:04]

  • Background on Carla’s Christian content website raisedtowalk.org (established 2013)
  • Hacking began December 2023, concrete evidence obtained April 2024
  • 198-page FBI report submitted July 28, 2024 with no response
  • Discovery of intellectual property theft from An Unexpected Journal and YouVersion Bible app
  • August 4, 2024: First three-hour livestream marking beginning of public documentation
  • Update #62 in ongoing saga documenting complete stonewalling by authorities
  • Discovery of Google Family Group providing ongoing access to hackers
  • Phil Tallon (Dean of Christian Thought at Houston Baptist University) identified as conspirator

Law Enforcement Failures and Gaslighting

Timestamp: [00:04:24 – 00:06:17]

  • Woodburn Police: “Hacking isn’t a crime”
  • Portland FBI Office: “Doesn’t rise to level of investigation”
  • Salem FBI Office: “Don’t investigate identity theft” and “Salem hospital can falsify your records because they’re their records”
  • Salem Police (Tuesday report): Only stolen phone is a crime, not identity theft or social media impersonation
  • Pattern of gaslighting, stonewalling, and dismissiveness from all authorities
  • Attacks escalate after every police report rather than being investigated

The Evolution of Social Media and Advertising

Timestamp: [00:11:20 – 00:18:28]

  • Original purpose of Facebook: connecting college friends (Mark Zuckerberg’s vision)
  • Pre-2016 Facebook advertising: targeted, economical, effective with pixel tracking
  • Businesses could advertise to specific page followers or create lookalike audiences
  • Pixel tracking allowed cross-internet monitoring of user behavior
  • Facebook ads were “dummy advertising” – pushing content rather than attracting customers

Cambridge Analytica Scandal and Its Aftermath

Timestamp: [00:14:45 – 00:18:28]

  • 2016: Ted Cruz campaign worked with Cambridge Analytica
  • 50 million Facebook profiles harvested for invasive targeting
  • Linked to Steve Bannon and Trump campaign
  • Fundamental American right to privacy violated
  • Congressional inquiries and massive privacy law changes followed
  • Post-scandal: Pixel tracking became less effective, couldn’t collect same data
  • Americans corporately decided “we don’t like to be creeped on”

The Corporate Response: Data Sharing “Clean Rooms”

Timestamp: [00:18:05 – 00:20:05]

  • Digital marketing companies didn’t adapt to learn traditional advertising skills
  • Instead, major companies began sharing customer data with each other
  • “Clean rooms” – partnerships where businesses share client information Users never explicitly consented to this data sharing
  • Creates fundamental inequity – small businesses can’t access this shared data
  • Likely illegal data sharing beyond just data breaches

How Sock Puppet Networks Replace Pixels

Timestamp: [00:20:16 – 00:23:28]

  • AI has made creating massive sock puppet account networks more accessible
  • Algorithm controlled by engagement: likes, comments, shares, connections
  • Social media requires login to see profiles – enables personalized content manipulation
  • VPN testing proves different content shown to different users on same profile
  • Sock puppets are now “the pixel” – delivering targeted ads through fake accounts
  • Agencies replace real friends with controlled accounts to deliver specific advertising
  • Evidence of inside access for agencies running mass sock puppet operations

Evidence: The August 4, 2024 Attack

Timestamp: [00:23:03 – 00:26:10]

  • After posting about fake YouTube analytics in Sean Cannell’s Facebook group, account locked for 3 days
  • Day after phone reformat: corrupted Play Store downloaded, every account hacked
  • Personal Instagram account: unable to access
  • Business Instagram dashboard: repeatedly denied despite correct credentials
  • Driver’s license submitted, rejected as “can’t verify your information”
  • Bright Sheep Ministries YouTube channel completely stolen and removed from Google account
  • Afghan ministry teaching videos (some unlisted, some private after translator was outed) permanently deleted
  • All recovery attempts denied

The Facebook Account Transfer Feature

Timestamp: [00:26:54 – 00:28:22]

  • Original account (CM Alvarez, created 2008) data moved to sock puppet account
  • New short name: CarlaAlvarez (had been impersonating Carla since 2013)
  • Activity log showed impersonation dating back to 2013
  • Initially thought hackers had special program – discovered it’s a built-in Meta feature
  • Facebook has built-in account transfer capability that enables identity theft
  • After posting about discovery on Twitter, activity log was altered -proving ongoing access

Meta’s Complicity: The Smoking Gun Evidence

Timestamp: [00:27:44 – 00:35:10]

  • Discovered advertising disclosure section showing who’s advertising to user
  • Shows who has you on advertising list AND exclude list
  • Exclude list purpose: Don’t show ads to existing customers (e.g., gym membership campaign)
  • The fake account impersonating Carla was on multiple exclude lists:
  • ACLJ (Jay Sekulow’s organization)
  • Salem Web Network
  • Meta itself
  • Proves Meta knows exactly which accounts are fake
  • Meta cannot claim ignorance
  • Meta is in partnership and networking with fake accounts
  • Evidence Meta isn’t trying to eliminate fake accounts but enabling them

The Real Impact: Nancy Robertson Impersonation

Timestamp: [00:31:25 – 00:32:14]

  • Fake account created of Nancy Robertson (Kingwood Garden Center, well-known community figure)
  • Running fraudulent fundraiser ads
  • Stealing influence and relationships of respected community member Clear fraud: impersonation + attempting to profit
  • Example of how criminals target well-connected people to exploit their networks

Inside Access and Ongoing Attacks

Timestamp: [00:35:59 – 00:36:09]

  • After posting on Twitter about 2013 impersonation discovery
  • Activity log altered when checked again
  • Proves continued inside access to the account
  • Meta’s features enable real-time manipulation of evidence

Meta’s Human Trafficking Policy Scandal

Timestamp: [00:37:00 – 00:37:41]

  • Whistleblower revealed Meta has 17-strike policy for human sex trafficking accounts
  • Accounts engaged in human trafficking get 17 chances before action taken
  • Abundant evidence Meta doesn’t care about criminal activity on platform
  • Should not receive immunity since they knowingly allow crimes

The Problem with Fake Engagement for Businesses

Timestamp: [00:38:03 – 00:48:00]

  • Agencies sell businesses on improved engagement metrics
  • Metrics measured: likes, comments, shares, list building, mentions
  • Services scan internet for brand mentions even without direct links
  • All of this can be faked
  • Evidence: YouTube transcripts altered to remove
    negative mentions (Bart Ehrman example)
  • Every instance of “Bart Ehrman” corrupted to “Bartman” to avoid negative mention tracking
  • Model automatically changes transcripts to hide negative context
  • Sock puppets fake engagement; AI models fake mentions
  • Services monitoring these metrics are “completely worthless”

YouTube Transcript Sabotage

Timestamp: [00:39:07 – 00:42:03]

  • December 2024: Conspirators began altering all YouTube transcripts
  • Changed Carla’s name to break brand
  • Not just typos – changed meaning of statements to opposite of what was said
  • 2020-present: Carla edited every transcript as part of publishing process
  • Evidence includes dates when captions were changed
  • YouTube Studio access altered – no subtitle options, only “languages”
  • Can’t see when subtitles altered anymore
  • Can’t export timestamps
  • Affects all channels connected to Gmail account, even other people’s channels
  • Evidence of inside access to YouTube/Google

What is Social Media Actually For?

Timestamp: [00:46:01 – 00:48:00]

  • Original purpose: Connect with people you know, meet new people, build community
  • Sock puppet networks are “black holes” that destroy community
  • Networks never interact outside their fake circles
  • Only goal: attention, clicks, views, ad revenue
  • Self-focused: engaging with others means lost revenue
  • Competition with other fake networks to control algorithm
  • Harms real people seeking genuine connections
  • Real people can’t find each other due to overwhelming fakeness

The Business Question: What Good Does Fake Engagement Do?

Timestamp: [00:47:01 – 00:52:20]

  • Fake engagement only useful for ego boost or hiding unpopularity
  • No value for actual businesses wanting customer connection
  • Real businesses need authentic interaction, not metrics
  • If you’re not Kardashian or Ted Cruz, fake numbers are meaningless

Case Study: Second Baptist North Instagram

Timestamp: [00:48:00 – 00:54:08]

  • Church announcement reel for new family pastor (Kale)
  • 12,000 member church with hundreds of kids in children’s ministry
  • 12 hours after posting: only sock puppet comments
  • Carla’s supportive comment was only real account engaging
  • Church relying on fake engagement despite massive real membership
  • Sock puppets keep post within fake account circles
  • Real members less likely to engage when seeing unknown fake commenters
  • Doesn’t create community or connect with actual attendees
  • After critical comment about fake engagement, comment deleted
  • Carla’s Instagram immediately attacked again
  • All post views showed as zero (even after viewing herself)
  • Cumulative views still showed, proving targeted manipulation not site-wide issue

The Fake Angel King Account

Timestamp: [00:54:08 – 00:58:05]

  • After commenting on Second Baptist post, attack wave on Carla’s accounts
  • Fake account impersonating Angel King (Second Baptist children’s director)
  • Showed as first suggested follow after attacks
  • Not Angel’s real account (Carla previously connected, now replaced)
  • Likely used to mass-report Carla’s posts
  • Demonstrates coordinated retaliation through impersonation

Instagram Account Manipulation

Timestamp: [00:53:51 – 00:56:08]

  • When regained access, following garbage accounts never followed before
  • Could identify which were “clients” of manipulation services
  • Deleted all followers and following
  • Started over from 2015, looking for real people
  • Found one seemingly real account, followed and interacted
  • Days later: unfollowed from real account, now following lookalike sock puppet
  • New account “looked like Charlotte Thomason in a wig”
  • Sock puppet liked irrelevant content (Spanish, Italian posts)
  • Poisons reach by making algorithm think wrong content is relevant
  • Accounts designed to tank reach and engagement
  • Called “tortious interference” – also illegal

The Business Risk of Hiring Sock Puppet Agencies

Timestamp: [00:58:59 – 01:00:06]

  • If you fire the agency, your accounts are burned
  • They likely transfer real followers to accounts they control
  • Replace with sock puppets on your account
  • Former clients face targeted sabotage campaigns
  • Retribution for firing them
  • Even without active sabotage: account burned by previous fake engagement
  • Algorithm poisoned by fake interaction history
  • “Shooting yourself in the foot”
  • Tying yourself to fakeness eliminates real community building

The Predatory Trust Problem

Timestamp: [01:00:00 – 01:03:17]

  • Carla taught children’s ministry for 8 years
  • Ran events for kids, Girl Scouts, school volunteering
  • Profile known by many children and families
  • Impersonators trading on her trusted identity
  • Children/teenagers who knew her wouldn’t recognize fake account
  • Creates predatory trust relationship
  • Fake Angel King account: Children’s director at large church
  • What could be done with fake account of someone children trust?
  • “So many different levels of wrong”
  • Even if church authorized social media management, giving far more access than appropriate
  • Retaliation after factual comment shows lack of trustworthiness

CS Lewis Counterfeit Books Update

Timestamp: [01:03:17 – 01:09:06]

  • Previous week covered fake CS Lewis book covers
  • Posted on Reddit with video evidence
  • HarperCollins site showing authentic ebook cover but counterfeit paperback cover
  • Three possible explanations:
  • HarperCollins site pulling from corrupted Library of Congress data
  • HarperCollins site itself hacked
  • DNS poisoning (happening to Carla’s own site)
  • Posted Tuesday/Wednesday before Thanksgiving, tagging HarperCollins, Publishers Weekly, Amazon
  • Amazon responded about reporting counterfeits
  • Amazon appeared to start cleanup
  • Day later: counterfeiters adapted strategy with new methods
  • Hideously ugly counterfeit covers appearing in Kindle suggestions
  • Criminal AI model learning and adapting to countermeasures
  • Salem Library catalog: most audiobook listings showed counterfeit covers
  • Some physical books also showing counterfeits
  • Uncertain if counterfeiters receiving revenue from library systems
  • Library staff unsure if pulling from Library of Congress

Ongoing Access Despite Police Reports

Timestamp: [01:09:16 – 01:19:06]

  • October 6, 2025: Reported Google Family Group with names and phone numbers
  • Officer: “Don’t know if any crimes committed here”
  • November 7, 2025: Jason Smith accessed Carla’s
    Google Drive (one month after report)
  • November 16-17: Jason Smith accessed multiple times
  • Accessed Affinity photo files for An Unexpected Journal covers
  • AUJ never paid Carla for cover creation (Virginia de la Lastra did artwork)
  • They have no right to source files, only individual pieces
  • Hacking files off laptop is a crime
  • Jason Smith uploaded folder with Afghan family information
  • PDF contained passport photos and Tazkiras (Afghan SSN equivalent)
  • Shared with Jim Swayze and Grant Broadhurst
  • Female-headed Afghan Christian family in extreme danger
  • Taliban environment: women can’t speak to each other, only one eye uncovered
  • Upload faked to appear from Carla’s Gmail account
  • Carla never uploaded Afghan info to Google Drive (used encrypted cloud storage)
  • Possible purposes: frame Carla, sell fake documents, unknown
  • Exposure of Afghans directly at feet of Salem Police Department
  • Carla has no association with these people except AUJ volunteer work 2018-2023
  • Zak Schmoll and Carla did majority of work until 2023
  • Jasmin Biggs and Jason Smith took over and “tanked it”
  • No business relationship, no affiliation beyond volunteer publishing  work

Today’s Attacks Continue

Timestamp: [01:21:02 – 01:22:29]

  • At Broadway Coffee: device hacking sessions, logged out of account
  • Mac logged into legacy marketing account
  • Had to boot them out before livestream
  • Cloudways account: hackers whitelisted IP address for trusted access
  • Comcast IP address from Vancouver, Washington
  • Questions whether criminals smarter than local law enforcement
  • Shouldn’t be hard to track down

Oregon Revised Statutes: What Actually IS a Crime

Timestamp: [01:10:13 – 01:16:32]

  • Identity Theft (ORS 165.800)
    • Police claim impersonation without getting money isn’t a crime
    • Statute: “Intent to deceive or defraud, obtain, possess, transfer, create, utter, or convert to own use the personal identification of another person”
    • Class C felony
    • Does NOT require financial gain
    • Taking personal identification IS theft
    • Impersonating actual person IS identity theft
  • Creating fictional persona is different (not identity theft)
  • Impersonating even dead people is identity theft
  • Aggravated Identity Theft (ORS 165.803)
    • 10 or more separate instances within 180 days (six months)
    • Conspirators have done “way more than that” continuously
  • Computer Crime
    • “To access means to instruct, communicate with, store data in, retrieve data from, or otherwise make use of any resources of a computer system or a computer network”
    • Hacking IS a crime in Oregon
    • Joshua Mitchell (Woodburn Police) wrong that “hacking isn’t a crime”
  • Stalking (ORS 163.732)
    • Also a crime under Oregon law
  • People need to carry ORS code to report crimes
  • “Literally happens all the time and nobody seems to know what a crime is around here”

Key Takeaway: Social Media Is Not Reality

Timestamp: [01:22:29 – 01:24:14]

  • Level of corruption exists at platform level
  • Even if originally connected to real person, strong likelihood account now fake
  • Real account replaced with fake profile
  • Not connecting to real person anymore
  • Cannot take social media content as gospel truth
  • May be fabricated to influence perception or manipulate
  • If you have lawsuit against Meta: they are corporately complicit
  • Meta knows what’s going on and who’s doing it
  • Meta is partnering with criminals
  • Meta has built-in features facilitating fraud

Resources and Closing

Timestamp: [01:24:00 – 01:24:14]

  • Full documentation at raisedtowalk.org/hacked-the-saga/
  • Extensive evidence and details available
  • Episode #62 in ongoing documentation series

Get Updates!

Subscribe to our free newsletter for updates of upcoming Bible studies, news and events.

    We respect your privacy. Unsubscribe at any time.

    Discussion & Engagement

    💬 Discussion Questions

    Introduction & Background

    • How has the complete lack of law enforcement response changed your perception of reporting cybercrime?
    • What should be the threshold for FBI investigation of hacking and identity theft cases?
    • How does intellectual property theft in Christian publishing differ from secular contexts?

    Law Enforcement Failures

    • When police claim “hacking isn’t a crime” despite clear statutes, what remedies do citizens have?
    • Should there be federal oversight when local and state law enforcement refuse to enforce cyber laws?
    • How does law enforcement gaslighting enable ongoing criminal enterprises?

    Cambridge Analytica & Advertising Evolution

    • Did the privacy protections post-Cambridge Analytica actually protect consumers or just shift the methods?
    • Are “clean rooms” (corporate data sharing partnerships) legal under current privacy laws?
    • How has the shift from “attracting customers” to “pushing content” harmed small businesses?

    Sock Puppet Networks

    • If sock puppets are “the new pixel,” what privacy violations are occurring that we’re not discussing?
    • How do agencies get “inside access” to platforms like Facebook/Instagram to manipulate accounts?
    • What responsibility do platforms have when they knowingly partner with fake account networks?

    Meta’s Complicity

    • If Meta knows which accounts are fake (proven by exclude lists), why isn’t this criminal conspiracy?
    • Should Section 230 immunity apply when platforms build features specifically enabling crimes?
    • What would appropriate penalties look like for platforms that knowingly enable identity theft?

    Business Impact

    • Why do churches and businesses hire agencies that use fake engagement when it provides no real value?
    • How can businesses verify their social media management isn’t using sock puppet networks?
    • What are the long-term costs of fake engagement beyond just “burning” your account?

    Predatory Trust

    • How does impersonating children’s ministry workers constitute a unique form of predatory behavior?
    • What safeguards should churches implement for staff social media presence?
    • Should impersonating someone who works with vulnerable populations carry enhanced penalties?

    Afghan Family Exposure

    • What are the potential consequences for Afghan Christians when their documents are exposed by hackers?
    • How does law enforcement inaction on cybercrime create real-world danger for refugees?
    • What responsibility do volunteer organizations have to protect sensitive information from sophisticated hackers?

    Counterfeit Books

    • If the Library of Congress database is compromised, what implications exist for copyright and publishing?
    • How do counterfeit covers on library systems impact authors and legitimate publishers?
    • What role should libraries play in verifying authenticity of digital catalog information?

    Oregon Statutes

    • Why might law enforcement be incentivized to claim crimes “aren’t crimes” despite clear statutes?
    • Should citizens be able to directly prosecute when prosecutors refuse to act on documented crimes?
    • How does selective enforcement of cyber laws create a protected class of criminals?

    Join the Discussion

    Connect with other truth-seekers in the Raised to Walk Community. Comment below.

    <a href="https://raisedtowalk.org/author/carla/" target="_self">Carla Alvarez</a>

    Carla Alvarez

    Carla Alvarez is the founder of Raised to Walk and a founding board member of An Unexpected Journal, a Communications Director at Legacy Marketing Services where she uses her BS in Marketing to create communication strategies for business, and an unlikely case manager and Bible Study teacher for the Afghan Christians of Kabul Hope Latest Series: Hacked: the Saga How an oily politician and a band of intellectual property and identity thieves conspired to erase a third-grade Sunday school teacher, Read more of her work on Google Scholar and Substack or contact her to write for you.

    To support me and my work directly: donate at @RaisedtoWalk on Venmo and $RaisedtoWalk on CashApp and Chime

    0 Comments

    Submit a Comment

    Your email address will not be published. Required fields are marked *

    This site uses Akismet to reduce spam. Learn how your comment data is processed.

    The institutions and people tagged are those mentioned in the stream. It does not mean that they are part of a criminal conspiracy or any wrongdoing. The tags are solely for organizational purposes to find mentions more easily.